Administrator Guide

• To prevent clients accessing the share from being able to view the names of folders and les in the share to which they do
not have access, click the Content tab and select the Access Based Enumeration checkbox.
• To enable virus scanning for SMB home shares, click the Antivirus Scanners tab and select the Virus Scan checkbox.
• To exempt directories from antivirus scanning, select the Folders Filtering Enabled checkbox and specify the directories in
the Directories excluded from scan list.
• To exempt le extensions from antivirus scanning, select the File Extension Filtering Enabled checkbox and specify the
extensions in the Extensions excluded from scan list.
• To deny access to les larger than the specied antivirus scanning le size threshold, select the Deny un-scanned large les
checkbox.
• To change the maximum size of les that are included in antivirus scanning, type a size in the Virus scan le size threshold
eld in kilobytes (KB), megabytes (MB), gigabytes (GB), or terabytes (TB).
k Click OK.
If you did not enable automatic folder creation, perform steps 2 and 3.
2 Give ownership of the SMB home shares to the account that will create the folders (either using a user-created script or manually) for
each user’s home share.
a Using Windows Explorer, connect to the SMB home share initial path.
b In the security setting of the SMB share, click Advanced and change the owner to Domain Admins, a specic domain
administrator, or a FluidFS cluster administrator account.
c Disconnect from the SMB home share and reconnect to it as the account that has ownership of it.
3 Using Windows Explorer, for each user that you want to be given a home share, create a folder for them that conforms to the folder
template you selected previously.
Changing the Owner of an SMB Share
When an SMB share is created, the owner of the SMB share must be changed before setting any access control lists (ACLs) or share-level
permissions (SLP), or attempting to access the SMB share. The following methods can be used to initially change the owner of an SMB
share:
• Use an Active Directory domain account that has its primary group set as the Domain Admins group.
• Use the FluidFS cluster Administrator account (used if not joined to Active Directory or Domain Admin credentials are not available).
Change the Owner of an SMB Share Using an Active Directory Domain Account
The Active Directory domain account must have its primary group set as the Domain Admins group to change the owner of an SMB share.
These steps might vary slightly depending on which version of Windows you are using.
1 Open Windows Explorer and in the address bar type: \\client_vip_or_name. A list of all SMB shares is displayed.
2 Right-click the required SMB share (folder) and select Properties. The Properties dialog box opens.
3 Click the Security tab and then click Advanced. The Advanced Security Settings dialog box opens.
4 Click the Owner tab and then click Edit. The Advanced Security Settings dialog box opens.
5 Click Other users or groups. The Select User or Group dialog box opens.
6 Select the domain admin user account that is used to set ACLs for this SMB share or select the Domain Admins group. Click OK.
7 Ensure that Replace owner on subcontainers and objects is selected and click OK.
8 Click the Permissions tab and follow Microsoft’s best practices to assign ACL permissions for users and groups to the SMB share.
Change the Owner of an SMB Share Using the FluidFS Cluster Administrator Account
If the FluidFS cluster is not joined to Active Directory, use the Administrator account to change the owner of an SMB share. These steps
might vary slightly depending on which version of Windows you are using.
1 Start the Map network drive wizard.
2 In Folder type: \\client_vip_or_name\smb_share_name
3 Select Connect using dierent credentials.
428
FluidFS Administration